Sergey,
Is the build toolchain for the RPM packages using an old version of openssl? I am seeing incompatibility errors when testing with 5.8.1 RPM and openssl-devel from system, or appstream repos.
These are the version differences I see in the logs:
|CRITICAL: tls [tls_init.c:870]: tls_h_mod_init_f(): installed openssl library version is too different from the library the kamailio tls module was compiled with: installed "OpenSSL 3.2.1 30 Jan 2024" (0x30200010), compiled "OpenSSL 3.0.7 1 Nov 2022" (0x30000070).#012 Please make sure a compatible version is used (tls_force_run in kamailio.cfg will override this check) |
Here is what I see in the system RPMs for openssl on centos9:
|[root@cent9-v075 ~]# dnf info openssl-devel Last metadata expiration check: 0:03:11 ago on Tue 21 May 2024 08:31:12 PM UTC. Installed Packages Name : openssl-devel Epoch : 1 Version : 3.2.1 Release : 1.el9 Architecture : x86_64 Size : 4.9 M Source : openssl-3.2.1-1.el9.src.rpm Repository : @System From repo : appstream Summary : Files for development of applications which will use OpenSSL URL : http://www.openssl.org/ License : ASL 2.0 Description : OpenSSL is a toolkit for supporting cryptography. The openssl-devel : package contains include files needed to develop applications which : support various cryptographic algorithms and protocols. |
Regards,
Tyler Moore Full Stack Software Engineer dOpenSource Office: 888-907-2085, ext: 34 Cell: 248-909-2769 Email:tmoore@dopensource.com
I have checked the packages used for the Kamailio build
[root@nout /]# rpm -qa | grep openssl openssl-libs-3.0.7-25.el9.x86_64 openssl-3.0.7-25.el9.x86_64 openssl-devel-3.0.7-25.el9.x86_64
Build images compiled 3-4 months ago. Probable for this time released a new version. I have checked openssl version and build dates at https://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/Packages/
It looks like OpenSSL 3.2.1 was compiled a month ago. I should rebuild Kamailio with the latest package versions.
On Wed, May 22, 2024 at 1:07 AM tyler moore via sr-dev < sr-dev@lists.kamailio.org> wrote:
Sergey,
Is the build toolchain for the RPM packages using an old version of openssl? I am seeing incompatibility errors when testing with 5.8.1 RPM and openssl-devel from system, or appstream repos.
These are the version differences I see in the logs:
CRITICAL: tls [tls_init.c:870]: tls_h_mod_init_f(): installed openssl library version is too different from the library the kamailio tls module was compiled with: installed "OpenSSL 3.2.1 30 Jan 2024" (0x30200010), compiled "OpenSSL 3.0.7 1 Nov 2022" (0x30000070).#012 Please make sure a compatible version is used (tls_force_run in kamailio.cfg will override this check)
Here is what I see in the system RPMs for openssl on centos9:
[root@cent9-v075 ~]# dnf info openssl-devel Last metadata expiration check: 0:03:11 ago on Tue 21 May 2024 08:31:12 PM UTC. Installed Packages Name : openssl-devel Epoch : 1 Version : 3.2.1 Release : 1.el9 Architecture : x86_64 Size : 4.9 M Source : openssl-3.2.1-1.el9.src.rpm Repository : @System
From repo : appstream
Summary : Files for development of applications which will use OpenSSL URL : http://www.openssl.org/ License : ASL 2.0 Description : OpenSSL is a toolkit for supporting cryptography. The openssl-devel : package contains include files needed to develop applications which : support various cryptographic algorithms and protocols.
Regards,
Tyler Moore Full Stack Software Engineer dOpenSource Office: 888-907-2085, ext: 34 Cell: 248-909-2769 Email: tmoore@dopensource.com
_______________________________________________ Kamailio (SER) - Development Mailing List To unsubscribe send an email to sr-dev-leave@lists.kamailio.org
Chiming in...
RHEL 9.4 is on 3.0.7; what you are seeing is from CentOS Stream 9 which has moved to 3.2.1.
Likely this will be in RHEL 9.5.
It is very unusual for Red Hat to bump the OpenSSL version within the life of a release.
https://issues.redhat.com/browse/RHEL-26271
On Wed, 22 May 2024, 06:07 tyler moore via sr-dev, < sr-dev@lists.kamailio.org> wrote:
Sergey,
Is the build toolchain for the RPM packages using an old version of openssl? I am seeing incompatibility errors when testing with 5.8.1 RPM and openssl-devel from system, or appstream repos.
These are the version differences I see in the logs:
CRITICAL: tls [tls_init.c:870]: tls_h_mod_init_f(): installed openssl library version is too different from the library the kamailio tls module was compiled with: installed "OpenSSL 3.2.1 30 Jan 2024" (0x30200010), compiled "OpenSSL 3.0.7 1 Nov 2022" (0x30000070).#012 Please make sure a compatible version is used (tls_force_run in kamailio.cfg will override this check)
Here is what I see in the system RPMs for openssl on centos9:
[root@cent9-v075 ~]# dnf info openssl-devel Last metadata expiration check: 0:03:11 ago on Tue 21 May 2024 08:31:12 PM UTC. Installed Packages Name : openssl-devel Epoch : 1 Version : 3.2.1 Release : 1.el9 Architecture : x86_64 Size : 4.9 M Source : openssl-3.2.1-1.el9.src.rpm Repository : @System
From repo : appstream
Summary : Files for development of applications which will use OpenSSL URL : http://www.openssl.org/ License : ASL 2.0 Description : OpenSSL is a toolkit for supporting cryptography. The openssl-devel : package contains include files needed to develop applications which : support various cryptographic algorithms and protocols.
Regards,
Tyler Moore Full Stack Software Engineer dOpenSource Office: 888-907-2085, ext: 34 Cell: 248-909-2769 Email: tmoore@dopensource.com
_______________________________________________ Kamailio (SER) - Development Mailing List To unsubscribe send an email to sr-dev-leave@lists.kamailio.org
-
Richard Chan -
Sergey Safarov -
tyler moore